Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft
File: a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft (raw, json)
Hash identifier: cneRZf2p3qGCaeLD8Q9uLDogwVKb7LCL+ru2PfysT2o=
Subject key identifier: 98:DA:C7:EF:CF:00:47:C9:49:09:80:D8:54:24:CD:E9:74:DB:6E:DB
Authority key identifier: 6B:A9:AF:8C:1F:5F:59:94:53:A6:07:72:21:83:6F:BA:A8:10:BD:78
Certificate issuer: /CN=6ba9af8c1f5f599453a6077221836fbaa810bd78
Certificate serial: 01A0E8893D5DD97461E53A7ABCA52CD02F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft
Manifest number: 016D
Signing time: Mon 28 Sep 2026 15:01:43 +0000
Manifest this update: Mon 28 Sep 2026 15:01:43 +0000
Manifest next update: Tue 29 Sep 2026 15:01:43 +0000
Files and hashes: 1: SuLs_JmSCQ9hnQLRMQSEc9KfjKE.roa (hash: q61fVl8G0xd8YOxD/9y87v0yu9OdiosdP3gG41Oey+8=)
2: a6mvjB9fWZRTpgdyIYNvuqgQvXg.crl (hash: zgmjI5r1YVOYr6EIPj2zpYMT7XU8u7FoKMXBnrAfY1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:3d:5d:d9:74:61:e5:3a:7a:bc:a5:2c:d0:2f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba9af8c1f5f599453a6077221836fbaa810bd78
Validity
Not Before: Sep 28 15:01:43 2026 GMT
Not After : Sep 29 15:01:43 2026 GMT
Subject: CN=98dac7efcf0047c9490980d85424cde974db6edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:8d:a5:a0:06:f2:da:de:1b:cb:b3:f9:bb:
1d:0a:fe:cb:ef:19:7d:f5:0a:f0:61:c2:9e:f3:b2:
eb:16:77:09:41:fc:4b:d5:22:72:4b:6c:2c:d5:59:
77:96:7f:47:ab:7e:de:aa:06:13:c4:b7:77:99:8c:
4a:e6:7b:d1:c3:34:5e:d9:0e:6b:8a:3a:91:e3:d8:
28:9d:a2:b5:ac:75:8e:6b:2f:92:04:80:2c:92:b7:
a0:1e:9c:66:b8:1e:4a:8d:a7:f4:93:b4:bf:87:c9:
4d:22:3b:a9:73:dd:05:f8:c5:4c:a7:9c:77:c0:04:
61:da:84:bb:81:61:56:b1:e2:5f:38:a6:f7:98:19:
b4:6c:ac:f8:9e:fb:d4:93:66:2a:2e:cc:5a:ff:31:
1a:b1:22:03:cd:b7:20:73:c0:0e:fd:45:2c:08:8a:
97:93:f9:1c:73:55:39:73:65:46:c2:a4:c9:8a:20:
50:60:01:10:91:f8:f4:60:ca:ba:65:95:e5:6b:77:
d9:4c:6e:cc:ec:35:2c:8a:cd:ea:65:a7:d6:42:91:
da:64:42:0c:0f:1d:0c:32:db:35:0c:5e:06:f5:b8:
67:28:6f:b8:41:bb:03:29:af:40:20:c4:03:a1:1b:
9d:1d:a2:8e:33:90:d1:a6:9a:71:b3:bd:f9:d7:35:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:C7:EF:CF:00:47:C9:49:09:80:D8:54:24:CD:E9:74:DB:6E:DB
X509v3 Authority Key Identifier:
keyid:6B:A9:AF:8C:1F:5F:59:94:53:A6:07:72:21:83:6F:BA:A8:10:BD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6mvjB9fWZRTpgdyIYNvuqgQvXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d6980c-49ee-4bb6-bf08-2d68e41232a9/1/a6mvjB9fWZRTpgdyIYNvuqgQvXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f0:8d:99:38:af:65:68:64:68:0c:9d:f9:0c:71:9d:2c:d7:
a5:2f:bd:2b:9b:73:8a:cf:e7:95:80:d3:f2:be:f7:ec:2b:e2:
7d:aa:a2:e8:8e:4a:a6:87:de:27:21:1a:1f:9e:27:f5:eb:b1:
ed:e9:8d:b9:2d:26:f3:b6:9d:4c:60:39:50:70:f1:98:82:5a:
3f:61:9b:8f:83:9f:88:a6:75:b2:3a:01:36:90:2f:67:20:9e:
e9:5e:80:bb:65:bd:2f:2d:1d:d6:ac:2f:fe:41:28:5a:b6:4c:
40:47:39:66:e4:4e:c6:9b:2a:0d:fd:dc:40:ca:13:a2:b4:67:
c7:76:30:67:ed:4d:9f:ae:70:cf:77:a9:ad:63:1f:4c:f9:2a:
66:ae:4f:ad:8d:c5:67:1e:1d:c2:15:e2:66:82:56:cc:72:b6:
4e:0b:c2:d8:64:51:7d:63:84:b2:35:75:21:e3:38:05:53:7a:
14:b2:10:6b:f0:36:e8:5e:db:82:08:36:52:9d:07:fe:c4:c1:
c5:78:d1:7d:b5:3f:50:0c:51:5d:27:75:44:98:55:a9:1f:d6:
1e:3d:20:ed:f2:bc:9e:68:d8:b5:c3:9d:ee:84:51:eb:a1:61:
05:05:1e:2c:59:8d:f0:41:f5:81:b3:69:46:2d:1b:7f:fe:cb:
5a:09:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:30:53 2026 by rpki-client